Emulator Cheats

Posted: **Mon May 23, 2011 8:08 am**

[ddtod]:

  <cheat desc="Enemies Die in 1-Hit">
	<script state="run">
		<action>maincpu.od@4282C=42680062</action>
	</script>
	<script state="off">
		<action>maincpu.od@4282C=91680062</action>
	</script>
  </cheat>

[ddtodr1]:

Code: Select all

  <cheat desc="Enemies Die in 1-Hit">
	<script state="run">
		<action>maincpu.od@42832=42680062</action>
	</script>
	<script state="off">
		<action>maincpu.od@42832=91680062</action>
	</script>
  </cheat>

[ddtodu] and [ddtodur1]:

Code: Select all

  <cheat desc="Enemies Die in 1-Hit">
	<script state="run">
		<action>maincpu.od@42752=42680062</action>
	</script>
	<script state="off">
		<action>maincpu.od@42752=91680062</action>
	</script>
  </cheat>

I haven't bothered to find the same code for other revisions, far too tedious for me.

Is there a way to search ROM addresses with the cheat engine? That way I could easily port the addresses to the other revisions by just doing an array of byte scan. Would this work in encrypted games such as CPS2 and CPS3?

Posted: **Mon May 23, 2011 10:33 am**

pasky13 wrote:I haven't bothered to find the same code for other revisions, far too tedious for me.

Is there a way to search ROM addresses with the cheat engine? That way I could easily port the addresses to the other revisions by just doing an array of byte scan. Would this work in encrypted games such as CPS2 and CPS3?

You can search for bytes, words, doubles and quads in the debugger.

From memory (not at home at the moment), in the debugger try these:-

find 0,ffffff,d.91680062
or
find 0,ffffff,91,68,00,62

Not sure if this will work in encrypted games, type "help find" in the debugger for more info.

Posted: **Mon May 23, 2011 10:47 am**

Thanks.

Doesn't work in encrypted games however =/.

Posted: **Mon May 23, 2011 2:49 pm**

Another way is to find an address that gets written or read around that location - this is is a useful technique for clones that use the same RAM addresses but diff ROM addresses.

Eg

In ddtod, at a known point during play type:-
BP 4282C
when it hits the breakpoint type
WP 0,ffffff,rw
when it hits the watchpoint, make a note of the address (eg ffb76a) and whether it was a read(r) or a write(w) (eg w)

open the clone and just before the same known point as in ddtod, open the debugger and type
wp ffb76a,1,w
this should hopefully let you find the adddress quicker (may need to F12 a few times depending on the address)...if not try refining the wp to include wpdata or register content checks.

Edit: added ffb76a to the above as that seems to be the address to look at.

Posted: **Sun Nov 20, 2011 12:21 am**

Added, also done the tedious work........

Emulator Cheats

[ddtod] D&D Tower of Doom - Enemies Die in 1-Hit

[ddtod] D&D Tower of Doom - Enemies Die in 1-Hit

Re: [ddtod] D&D Tower of Doom - Enemies Die in 1-Hit

Re: [ddtod] D&D Tower of Doom - Enemies Die in 1-Hit

Re: [ddtod] D&D Tower of Doom - Enemies Die in 1-Hit

Re: [ddtod] D&D Tower of Doom - Enemies Die in 1-Hit